Submit #575244: D-Link DI-500WF-WT latest Command Injectioninfo

TitleD-Link DI-500WF-WT latest Command Injection
DescriptionThe DI-500WF-WT 802.11N300M touch panel AP under Youxun Technology Co., Ltd. has a command injection vulnerability, allowing attackers to execute arbitrary code through the cmd parameter in the sub-456DE8 function
User
 eternity. (UID 85154)
Submission05/11/2025 07:55 (1 Year ago)
Moderation06/03/2025 06:24 (23 days later)
StatusAccepted
VulDB entry310909 [D-Link DI-500WF-WT up to 20250511 jhttpd /msp_info.htm?flag=cmd sub_456DE8 command injection]
Points13

Want to know what is going to be exploited?

We predict KEV entries!